Easier updating of cacert.pem
- Update cacert.pem from upstream
Try to work around jruby#1055

Users would get error "Duplicate extensions not allowed" when using
OSX's built-in ssl ca cert list. We now catch this error and fall
back to the built-in one ftw ships from curl's website.